Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: KTTFvfLZdquGfbLFhhGIw/jHJBpolV7OELAYbHs9JqA=
Subject key identifier: 2C:F2:92:44:BC:B5:8A:49:2E:44:32:19:B8:31:33:D7:24:9A:70:61
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 0199FC58754291D28A71D082949A3CA8870A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=)
2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: ZLW9i6JMDILgeadB0RwvNyjO80OvrgiFGzor5xYmjZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:75:42:91:d2:8a:71:d0:82:94:9a:3c:a8:87:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=2cf29244bcb58a492e443219b83133d7249a7061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:1a:31:be:e0:d6:1f:9f:c7:ed:07:e1:2d:
84:fe:bb:84:74:08:53:06:d6:3e:26:f4:81:fc:73:
26:83:67:60:7c:d9:0e:c6:5c:43:6f:e3:ff:eb:89:
1f:2d:59:05:05:33:7e:55:ac:2b:0b:9f:a9:5b:d6:
61:21:4e:ab:fc:03:85:97:6e:03:42:6d:18:17:05:
29:e1:e0:e8:96:d9:a2:1b:cb:19:88:b3:7b:7c:47:
48:34:6d:49:56:3b:cb:d7:c5:6e:f6:ab:df:0f:0a:
8c:60:ae:d1:5c:c7:b7:7d:94:c8:59:ad:f7:fd:fd:
c8:ea:f5:01:18:9d:e1:95:96:a8:b9:a9:7a:47:f9:
b3:8f:c2:4c:b9:69:3a:2a:8a:13:44:cc:1c:ce:b1:
cd:44:cf:4e:63:32:80:ed:71:04:f2:18:dd:28:c7:
c5:56:b4:7b:6d:49:52:fc:d8:a8:17:f2:ad:31:29:
93:bc:a4:59:ab:56:97:c4:1d:d2:88:9e:a7:39:0c:
f2:8b:9b:fa:36:e0:79:9b:5c:5d:32:ee:15:ba:2b:
e3:8a:a1:11:a4:26:8f:ec:0f:a5:04:1f:93:ea:20:
fa:f1:4a:c0:f2:18:71:af:05:be:29:1a:d0:dd:79:
3f:98:d1:5c:1c:cd:ae:2f:5c:85:4e:15:87:18:09:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F2:92:44:BC:B5:8A:49:2E:44:32:19:B8:31:33:D7:24:9A:70:61
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:90:08:5d:d0:27:4e:ec:87:85:59:b1:7d:5f:7e:54:b0:b7:
e0:f2:1c:49:7a:53:c9:5e:0a:ab:0b:8b:1f:68:31:13:4e:cf:
18:2e:c4:84:11:4a:05:21:9a:04:7e:ec:d9:a1:fa:61:e7:4c:
e9:9f:2c:c6:d4:df:43:1b:50:9c:95:46:ca:b2:6e:e5:6b:1e:
94:59:9c:d1:1c:f1:9d:bb:d9:20:f8:14:85:63:34:b4:27:68:
bb:0a:e7:a1:48:a3:9b:8d:be:7b:45:a2:9f:56:ec:67:6d:6a:
b9:01:f5:19:cc:23:a9:01:b6:dd:7c:30:c1:32:2d:b8:5b:e2:
d6:bd:15:8f:da:4d:5e:43:14:21:06:b5:d9:3b:dd:07:79:04:
ae:bb:f0:df:94:e2:c8:85:14:8a:8a:b2:0b:01:df:a6:e3:ca:
b9:69:1e:4d:7f:ee:60:05:f8:a9:4d:39:62:3f:76:cd:f9:39:
14:2b:47:e6:67:f6:8d:34:f8:62:bb:93:e0:56:31:40:36:95:
0e:2e:12:fb:60:41:56:a4:f0:e7:59:f3:ae:a7:c0:ba:48:79:
10:75:7d:8c:8e:15:26:1d:74:3e:f9:b4:2f:70:b6:9c:01:11:
c0:81:42:e3:c0:af:67:de:2a:26:e6:f8:02:1c:b6:37:f5:6f:
1c:df:35:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHVCkdKKcdCClJo8qIcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzI3ZDA5ZmJiMTlhN2Y5ODVkNzUxYTIwMzExYzFiYWQ0
YjA3MWYwHhcNMjUxMDE5MTIwMTE5WhcNMjUxMDIwMTIwMTE5WjAzMTEwLwYDVQQD
EygyY2YyOTI0NGJjYjU4YTQ5MmU0NDMyMTliODMxMzNkNzI0OWE3MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNoaMb7g1h+fx+0H4S2E/ruEdAhT
BtY+JvSB/HMmg2dgfNkOxlxDb+P/64kfLVkFBTN+VawrC5+pW9ZhIU6r/AOFl24D
Qm0YFwUp4eDoltmiG8sZiLN7fEdING1JVjvL18Vu9qvfDwqMYK7RXMe3fZTIWa33
/f3I6vUBGJ3hlZaoual6R/mzj8JMuWk6KooTRMwczrHNRM9OYzKA7XEE8hjdKMfF
VrR7bUlS/NioF/KtMSmTvKRZq1aXxB3SiJ6nOQzyi5v6NuB5m1xdMu4VuivjiqER
pCaP7A+lBB+T6iD68UrA8hhxrwW+KRrQ3Xk/mNFcHM2uL1yFThWHGAliqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzykkS8tYpJLkQyGbgxM9ckmnBhMB8GA1UdIwQY
MBaAFCxyfQn7sZp/mF11GiAxHButSwcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQt
Y2NjNGYxZTAwOTkwLzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQtY2NjNGYxZTAwOTkw
LzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpAIXdAn
TuyHhVmxfV9+VLC34PIcSXpTyV4KqwuLH2gxE07PGC7EhBFKBSGaBH7s2aH6YedM
6Z8sxtTfQxtQnJVGyrJu5WselFmc0RzxnbvZIPgUhWM0tCdouwrnoUijm42+e0Wi
n1bsZ21quQH1GcwjqQG23XwwwTItuFvi1r0Vj9pNXkMUIQa12TvdB3kErrvw35Ti
yIUUioqyCwHfpuPKuWkeTX/uYAX4qU05Yj92zfk5FCtH5mf2jTT4YruT4FYxQDaV
Di4S+2BBVqTw51nzrqfAukh5EHV9jI4VJh10Pvm0L3C2nAERwIFC48CvZ94qJub4
Ahy2N/VvHN81kg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:39 2025 by rpki-client